129 matches found
a2s (>=0.1.0 <=0.5.1), abxml (>=0.2.1 <=0.6.2) +240 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3 <=0.3.3)
bzip2 CARGO version =0.2.3, =0.1.0, =0.2.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:RUSTSEC-2023-0004...
pastebinit Path Traversal vulnerability
A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 can address this issue. The name of the pat...
GHSA-CWH7-28VG-JMPR pastebinit Path Traversal vulnerability
A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 can address this issue. The name of the pat...
PT-2022-8069 · Unknown · Pastebinit
Name of the Vulnerable Software and Affected Versions: pastebinit versions up to 0.2.2 Description: A vulnerability was found in pastebinit, classified as problematic. The issue affects the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path...
PT-2022-24910 · Openfga · Openfga
Name of the Vulnerable Software and Affected Versions: openfga/openfga versions 0.2.3 and prior Description: OpenFGA is an authorization/permission engine. The streamed-list-objects endpoint was not validating the authorization header, resulting in disclosure of objects in the store. Users who ar...
CVE-2021-34081
OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository...
org.jenkins-ci.plugins:azure-acs (>=0.1.0 <=0.2.4), org.jenkins-ci.plugins:azure-dev-spaces (>=3.0.0 <=3.0.3) potentially affected by CVE-2022-27210 via org.jenkins-ci.plugins:kubernetes-cd (>=0.1.0 <=0.2.3)
org.jenkins-ci.plugins:kubernetes-cd MAVEN version =0.1.0, =0.1.0, =3.0.0, =3.0.3 Source cves: CVE-2022-27210 Source advisory: OSV:GHSA-VQ6C-FVXW-P45V...
Inadequate Encryption Strength in python-keystoneclient
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
VulnCheck KEV: CVE-2019-9881
The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled...
Rust 输入验证错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in chacha20 crate in Mozilla Rust versions prior to 0.2.3, which stems from a ChaCha20 counter overflow that can be exploited by an attacker to determine plaintext...
CVE-2019-16281
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if token === apiToken return true; return false;" code block...
Code injection
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if token === apiToken return true; return false;" code block...
Nayutaco Ptarmigan Trust Management Issues Vulnerabilities
Nayutaco Ptarmigan is a C/C++ based software for bitcoind network support from the Perth Nayutaco team. A security vulnerability exists in versions of Ptarmigan prior to 0.2.3, which stems from a lack of API token validation, e.g., the "if token === apiToken return true; return false;" code block...
adi (>=0.4.0 <=0.6.0), adi_screen (>=0.3.0 <=0.7.0) +167 more potentially affected by CVE-2020-35923 via ordered-float (>=0.2.3 <=1.0.2)
ordered-float CARGO version =0.2.3, =0.4.0, =0.3.0, =0.7.5, =0.6.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =3.1.3, =0.1.1, =0.9.0, =0.23.0 and more Source cves: CVE-2020-35923 Source advisory: OSV:RUSTSEC-2020-0082...
CVE-2020-12676
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack"...
CVE-2020-12676
FusionAuth fusionauth-samlv2 0.2.3 is vulnerable to a Signature Exclusion Attack: remote attackers can forge SAML messages and bypass authentication when a SAML assertion lacks a Signature element. The Red Hat/Red Hat advisory and other connected sources confirm the affected version and behavior....
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
DEBIAN-CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
